This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/CN6EXSiFw5QSIshsUFF4IHVqqoo.roa
File: CN6EXSiFw5QSIshsUFF4IHVqqoo.roa (raw, json)
Hash identifier: hpI75KnlbJC0wwYzc+gWN1gE3ImkLqA31jIBmq06I9w=
Subject key identifier: 08:DE:84:5D:28:85:C3:94:12:22:C8:6C:50:51:78:20:75:6A:AA:8A
Certificate issuer: /CN=6aa6f9e3e2622a7815a259e58d552439c255a31b
Certificate serial: 019B78A32562778F3F97297C0143BA11BECD
Authority key identifier: 6A:A6:F9:E3:E2:62:2A:78:15:A2:59:E5:8D:55:24:39:C2:55:A3:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/CN6EXSiFw5QSIshsUFF4IHVqqoo.roa
Signing time: Thu 01 Jan 2026 08:18:36 +0000
ROA not before: Thu 01 Jan 2026 08:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34984
IP address blocks: 185.157.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:25:62:77:8f:3f:97:29:7c:01:43:ba:11:be:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa6f9e3e2622a7815a259e58d552439c255a31b
Validity
Not Before: Jan 1 08:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08de845d2885c3941222c86c50517820756aaa8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:74:3b:44:6b:80:71:fb:a9:26:22:f7:d1:0e:
17:55:4b:bb:31:57:35:03:66:38:32:8a:b9:c3:ff:
c3:98:24:f2:b5:f8:57:c0:98:ec:23:df:cb:1e:6e:
6e:5e:88:51:42:ae:83:a3:3b:3c:5c:ee:ce:93:aa:
09:c0:aa:03:dc:2a:a1:5e:f3:de:05:d3:ab:e4:78:
ad:05:04:b5:00:0c:02:0a:70:63:98:c9:51:96:e5:
5b:b5:67:74:f8:07:02:d3:7c:f4:02:f7:89:b7:c8:
97:cc:18:b6:21:59:d2:7b:b7:68:1f:33:35:bc:6b:
5b:00:98:9c:2f:55:b4:ff:9b:ca:e5:04:ee:bf:20:
29:71:5d:38:05:1f:18:7b:23:26:99:88:fc:9e:73:
e2:7b:c0:7d:c1:08:d9:0c:d6:85:a2:9e:73:23:64:
09:59:b3:20:e9:b4:54:87:8b:91:58:f1:22:50:0f:
6a:62:dc:f8:77:77:34:d1:c5:93:ab:83:1c:c8:86:
b1:7b:1c:58:2f:e2:e9:0f:ad:70:38:1a:e5:bc:70:
cf:5a:e2:88:c1:39:bd:c7:d0:19:8c:98:34:a7:16:
f8:c8:7d:bb:b5:61:1b:e8:a7:70:6f:5c:4a:d3:db:
37:40:f4:76:17:22:fd:91:2c:14:d1:bc:0f:d9:88:
1c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DE:84:5D:28:85:C3:94:12:22:C8:6C:50:51:78:20:75:6A:AA:8A
X509v3 Authority Key Identifier:
keyid:6A:A6:F9:E3:E2:62:2A:78:15:A2:59:E5:8D:55:24:39:C2:55:A3:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/CN6EXSiFw5QSIshsUFF4IHVqqoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.204.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:c5:bc:99:12:c4:5e:38:a8:fc:a0:b2:a5:ca:77:2b:9b:41:
64:e8:37:f7:fd:4f:7c:75:96:37:f8:26:82:f2:82:c6:81:35:
02:04:37:ea:68:fd:7d:6d:19:b6:d1:06:9f:c5:63:35:c5:e6:
f9:b1:4f:98:0b:8e:2d:bc:73:ff:9b:98:53:d8:81:d1:0e:1c:
1d:f0:ca:a1:59:11:de:e6:89:8c:63:66:69:28:26:2f:cb:26:
c8:b9:3e:53:ef:6f:7e:da:84:78:9e:32:ee:e1:8b:62:0f:fd:
d3:da:2c:03:62:21:74:42:a5:cd:1c:1a:94:6c:30:e1:55:5b:
a3:83:a6:d7:28:30:b6:b9:62:be:04:a7:75:f7:72:ba:2c:63:
5c:f3:92:a7:92:bd:a4:01:b9:7b:32:fe:88:4a:cf:44:89:ec:
c9:15:84:8d:68:74:2d:ab:f0:ef:20:4d:f5:b7:b9:13:47:66:
f0:32:ee:69:c7:fe:dd:6c:cd:a1:27:a3:a2:d1:0f:41:b8:04:
a6:87:fd:ab:59:97:4c:5c:95:77:75:e5:ff:65:4f:60:01:f7:
15:c8:f7:f0:c0:e6:f7:ae:f5:57:91:d5:a8:dd:5a:e6:fd:20:
c7:16:c4:f2:ff:70:7d:a0:75:f4:1d:d9:95:67:d8:7d:8e:63:
b2:22:22:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:39:36 2026 by rpki-client